Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1489C7202206D3D9CB5B29F7359566384EE9483AC7ED34FAE48CD02B62A06FAE/0/323830313a31623a393830303a3a2f34382d3438203d3e20323732313037.roa
File:                     323830313a31623a393830303a3a2f34382d3438203d3e20323732313037.roa (raw, json)
Hash identifier:          +516+Uik0NcN+p+xBVvMPRCWEOuVxGo95U4NYc8qHxc=
Subject key identifier:   C0:CF:B2:97:9D:06:39:C1:66:80:0F:D6:09:02:02:A1:A1:53:FA:DB
Certificate issuer:       /CN=524C8468BBEEA468708713BB02C909C11A4A4F25
Certificate serial:       37EB7D94CBB39E2F3BDA279C85D6F27E58E7D84F
Authority key identifier: 52:4C:84:68:BB:EE:A4:68:70:87:13:BB:02:C9:09:C1:1A:4A:4F:25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/524C8468BBEEA468708713BB02C909C11A4A4F25.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1489C7202206D3D9CB5B29F7359566384EE9483AC7ED34FAE48CD02B62A06FAE/0/323830313a31623a393830303a3a2f34382d3438203d3e20323732313037.roa
Signing time:             Wed 15 Apr 2026 17:38:56 +0000
ROA not before:           Wed 15 Apr 2026 17:33:56 +0000
ROA not after:            Wed 14 Apr 2027 17:38:56 +0000
asID:                     272107
IP address blocks:        2801:1b:9800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1489C7202206D3D9CB5B29F7359566384EE9483AC7ED34FAE48CD02B62A06FAE/0/524C8468BBEEA468708713BB02C909C11A4A4F25.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1489C7202206D3D9CB5B29F7359566384EE9483AC7ED34FAE48CD02B62A06FAE/0/524C8468BBEEA468708713BB02C909C11A4A4F25.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/524C8468BBEEA468708713BB02C909C11A4A4F25.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 04:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:eb:7d:94:cb:b3:9e:2f:3b:da:27:9c:85:d6:f2:7e:58:e7:d8:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=524C8468BBEEA468708713BB02C909C11A4A4F25
        Validity
            Not Before: Apr 15 17:33:56 2026 GMT
            Not After : Apr 14 17:38:56 2027 GMT
        Subject: CN=C0CFB2979D0639C166800FD6090202A1A153FADB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c9:bc:c5:d5:5c:f8:88:6d:b6:e1:3d:1f:9f:
                    5a:8f:27:b4:33:cd:22:a8:bc:93:5c:94:ee:d2:fe:
                    2e:7d:38:6a:64:c9:b8:56:a2:09:9b:e0:bd:7b:44:
                    eb:b3:a8:40:d1:5b:c2:55:17:49:08:8b:6f:4b:fe:
                    89:04:67:dd:3a:06:b6:2f:7e:c1:19:6e:52:0f:a5:
                    90:9c:33:ad:43:f7:be:6c:f9:46:2e:eb:fd:ba:ea:
                    36:2c:31:04:41:b2:63:e2:8e:2b:af:6b:a7:4e:60:
                    f3:0b:0a:45:02:7b:5c:26:b7:98:ec:10:6a:87:5f:
                    00:15:1f:05:35:4a:b4:ee:6b:21:5e:57:01:c5:95:
                    79:0c:5f:2c:e7:15:ab:db:14:32:3b:8c:e3:27:26:
                    0b:e3:0f:74:01:9d:1e:58:84:f7:f2:52:7a:be:79:
                    2e:ec:b1:3a:aa:e8:17:c1:f5:30:d3:24:32:ee:cb:
                    2a:83:9f:1e:e1:4a:34:19:c6:e1:d4:b8:44:71:e7:
                    50:f5:98:bf:28:09:24:27:eb:6d:78:11:48:f7:fe:
                    f7:b6:1f:15:8b:87:46:18:5b:8f:9d:93:bf:92:96:
                    87:e2:95:a5:2d:17:b9:88:f1:af:d3:56:5a:eb:1c:
                    c9:c9:84:98:4d:e0:b1:ed:f5:5a:07:3c:8f:8f:32:
                    a9:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:CF:B2:97:9D:06:39:C1:66:80:0F:D6:09:02:02:A1:A1:53:FA:DB
            X509v3 Authority Key Identifier:
                keyid:52:4C:84:68:BB:EE:A4:68:70:87:13:BB:02:C9:09:C1:1A:4A:4F:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1489C7202206D3D9CB5B29F7359566384EE9483AC7ED34FAE48CD02B62A06FAE/0/524C8468BBEEA468708713BB02C909C11A4A4F25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/524C8468BBEEA468708713BB02C909C11A4A4F25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1489C7202206D3D9CB5B29F7359566384EE9483AC7ED34FAE48CD02B62A06FAE/0/323830313a31623a393830303a3a2f34382d3438203d3e20323732313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1b:9800::/48

    Signature Algorithm: sha256WithRSAEncryption
         3f:fd:5f:4c:08:bc:20:44:65:52:82:bf:d1:6e:38:f8:8a:72:
         50:f8:f4:b0:d9:c9:7c:08:58:95:a4:f9:9b:79:a0:4c:47:a9:
         df:23:48:59:56:5c:6f:09:80:1e:bf:c0:3c:ae:ad:c3:0d:75:
         60:76:c3:f4:f3:01:ba:0b:17:ac:2a:16:b5:b3:63:e6:f6:d2:
         77:d8:ef:56:8b:05:36:70:be:1e:42:5a:ba:97:b0:90:c7:46:
         55:0b:97:87:0b:cc:9a:ed:70:37:9c:f8:3d:85:30:ac:9e:15:
         fc:02:53:28:9e:1f:82:4e:18:5f:a1:f9:ac:68:68:28:63:dc:
         e6:3c:a1:ad:85:cc:db:7e:20:62:dd:d5:1b:65:9c:f3:cf:16:
         f4:0b:3e:db:b2:be:5e:1d:d3:f8:e7:1d:0e:bb:c0:e3:15:6e:
         3b:fe:3b:67:9c:72:aa:34:23:e9:ab:f3:d8:29:75:14:25:9e:
         99:cf:76:13:f8:9d:c0:60:86:bb:f6:c6:59:7c:1d:41:88:46:
         fd:98:4f:da:52:74:08:b8:cf:88:08:ed:62:55:64:f4:32:19:
         fe:fe:06:33:0d:43:1d:21:52:20:b9:26:e7:70:09:49:5b:af:
         23:c9:1f:61:19:55:c0:a2:b1:95:cf:b2:7d:bd:34:12:26:9a:
         d5:69:5c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:46:17 2026 by rpki-client